PF, quick reference guide - Revision history

Sidetone: /* Resources */

2015-12-07T00:23:24Z

Resources

Sidetone at 00:20, 7 December 2015

2015-12-07T00:20:23Z

Sidetone at 23:45, 6 December 2015

2015-12-06T23:45:51Z

Sidetone: /* References */

2015-12-06T23:43:40Z

References

Sidetone: /* References */

2015-12-06T23:43:10Z

References

Sidetone: moved PF, rules to PF, quick reference guide: A quick reference to help newcomers understand PF's syntax, doesn't contain configuration templates. Readers must go to other documentation to set up PF.

2015-12-06T23:38:59Z

moved PF, rules to PF, quick reference guide: A quick reference to help newcomers understand PF's syntax, doesn't contain configuration templates. Readers must go to other documentation to set up PF.

Sidetone: /* Syntax */

2015-12-05T15:58:06Z

Syntax

Sidetone: /* Syntax */

2015-12-05T15:35:21Z

Syntax

Sidetone: /* Macros */

2015-12-05T15:33:28Z

Macros

Sidetone: /* Macros */

2015-12-05T15:18:44Z

Macros

← Older revision		Revision as of 00:23, 7 December 2015
Line 53:		Line 53:

	Some arguments are optional, depending on circumstances.		Some arguments are optional, depending on circumstances.
		+
		+	==Notice==
		+	Rule instructions may vary according to newer versions of PF. Newer versions of PF such as on OpenBSD contain more abilities, and some syntax changes compared to PF on FreeBSD.

	==Resources==		==Resources==

← Older revision		Revision as of 00:20, 7 December 2015
Line 1:		Line 1:
−	PF is divided into the sections:	+	pf.conf is divided into the sections:
	* Macros - Variables are defined in this section. This simplifies changing hardware, or makes it easier to list a lot of arguments as a variable. IP's are not set here, but instead in the next section.		* Macros - Variables are defined in this section. This simplifies changing hardware, or makes it easier to list a lot of arguments as a variable. IP's are not set here, but instead in the next section.

@@ Line 54: / Line 54: @@
 Some arguments are optional, depending on circumstances.
-==References and resources==
+==Resources==
 * [http://www.openbsd.org/faq/pf/index.html PF: The OpenBSD Packet Filter]
 * [http://home.nuug.no/~peter/pf/ Firewalling with PF / Brannmur med PF]
@@ Line 60: / Line 61: @@
 * FreeBSD Documentation
-==Further Reading==
+===Further Reading===
 * {{file|/usr/share/examples/pf/}}
 * Book of PF
 [[Category:Securing FreeBSD]]

@@ Line 54: / Line 54: @@
 Some arguments are optional, depending on circumstances.
-==References==
+==References and resources==
 * [http://www.openbsd.org/faq/pf/index.html PF: The OpenBSD Packet Filter]
 * [http://home.nuug.no/~peter/pf/ Firewalling with PF / Brannmur med PF]

@@ Line 59: / Line 59: @@
 * Network Administration with FreeBSD 7: Network Configuration - Firewalls
 * FreeBSD Documentation
 [[Category:Securing FreeBSD]]

@@ Line 49: / Line 49: @@
 * interface - $network_interface
 * af - inet, inet6
-* proto - tcp, udp, sctp, icmp6; see {{file|/etc/protocols}}
+* proto - tcp, udp, sctp, icmp6; see {{file|/etc/protocols}}. Can be a number or named.
-* port - see {{file|/etc/services}}. Can be a number or named.
+* port - see {{file|/etc/services}}.
 Some arguments are optional, depending on circumstances.

@@ Line 47: / Line 47: @@
 * direction - in, out
 * log - log, log (all)
-* interface - network interface
+* interface - $network_interface
 * af - inet, inet6
 * proto - tcp, udp, sctp, icmp6; see {{file|/etc/protocols}}

@@ Line 17: / Line 17: @@
 Macros are defined with an {{code|<nowiki>=</nowiki>}} equal sign with arguments to be used in the rules in {{code|"}} quotes.
   wireless_card_to_internet="ath0"
-  tcp="{ http ntp 443 }"
+  tcp="{ '''http ntp 443''' }" # this is often used, but doesn't limit protocols to tcp
 To reference these later use {{code|$}}, for instance {{code|$tcp}}. This simply allows lists to be kept neatly instead of having to retype the same lines inconveniently, or allows a simple change to be made without replacing all references to the change.